Apache Server configuration support - Apache 2 and COM security issue

This is Interesting: Free IT Magazines  
Home > Archive > Apache Server configuration support > August 2005 > Apache 2 and COM security issue





You are viewing an archived Text-only version of the thread. To view this thread in it's original format and/or if you want to reply to this thread please [click here]

Author Apache 2 and COM security issue
Csaba@z6.com

2005-08-20, 5:56 pm

I've got a php server side script (PHP 5.1 as module / Apache 2.0.53 /
Win XP Pro, SP 2 / administrator and sole user of machine) and
everything has been working great. Now I wish one particular script to
do either one of the following two things:

$ie=new COM("InternetExplorer.Application"); // load up hidden version
$ie->Navigate("about:blank"); // initialize it
// next line should show a new copy of IE, but in
$ie->visible = true; // server side code has no effect

OR

$ws=new COM("WScript.Shell"); // done to show popup - this is OK
$sh=new COM("Shell.Application"); // created, but restricted
$ws->Popup ("About to test", 4, "Server side popup", 131120);
$shW=$sh->Windows; // dies
$ws->Popup ("I'm still alive - not", 4, "Server side popup", 131120);

If I execute this outside the Apache framework, that is to say run
Command Line Interface (CLI) php.exe or php-win.exe, the code has no
problems: IE comes up and subsequently there are two popups. It seems
pretty clear that it's a security or permissions thing, but I just
don't know where to start digging into Apache for this. Apache's
behaviour is reasonable, but I'd like to relax the security on those
COM objects for this particular script. Is there a way?


My setup is pretty vanilla - just took php out of the box and started
using it, no ini changes needed. Apache configuration has mostly been
just to have a few virtual hosts. Any ideas where to start on this,
like what settings need to be changed where?

Thanks,
Csaba Gabor from Vienna

Sponsored Links






Free braindumps | Software forum | Database administration forum

Copyright 2003 - 2008 webservertalk.com